[pkgsrc/trunk]: pkgsrc/security/gnupg2 Update security/gnupg2 to 2.2.23

[js <js%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/90ff5dee10ab
branches:  trunk
changeset: 438136:90ff5dee10ab
user:      js <js%pkgsrc.org@localhost>
date:      Sat Sep 05 10:25:52 2020 +0000

description:
Update security/gnupg2 to 2.2.23

Fixes a criticial vulnerability: https://dev.gnupg.org/T5050


Noteworthy changes in version 2.2.22
====================================

  * gpg: Change the default key algorithm to rsa3072.

  * gpg: Add regular expression support for Trust Signatures on all
    platforms.  [#4843]

  * gpg: Fix regression in 2.2.21 with non-default --passphrase-repeat
    option.  [#4991]

  * gpg: Ignore --personal-digest-prefs for ECDSA keys.  [#5021]

  * gpgsm: Make rsaPSS a de-vs compliant scheme.

  * gpgsm: Show also the SHA256 fingerprint in key listings.

  * gpgsm: Do not require a default keyring for --gpgconf-list.  [#4867]

  * gpg-agent: Default to extended key format and record the creation
    time of keys.  Add new option --disable-extended-key-format.

  * gpg-agent: Support the WAYLAND_DISPLAY envvar.  [#5016]

  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist.  [#4866]

  * gpg-agent: Make the Pinentry work even if the envvar TERM is set
    to the empty string.  [#4137]

  * scdaemon: Add a workaround for Gnuk tokens <= 2.15 which wrongly
    incremented the error counter when using the "verify" command of
    "gpg --edit-key" with only the signature key being present.

  * dirmngr: Better handle systems with disabled IPv6.  [#4977]

  * gpgpslit: Install tool.  It was not installed in the past to avoid
    conflicts with the version installed by GnuPG 1.4.  [#5023]

  * gpgtar: Handle Unicode file names on Windows correctly (requires
    libgpg-error 1.39).  [#4083]

  * gpgtar: Make --files-from and --null work as documented.  [#5027]

  * Build the Windows installer with the new Ntbtls 0.2.0 so that TLS
    connections succeed for servers demanding GCM.

  Release-info: https://dev.gnupg.org/T5030


Noteworthy changes in version 2.2.23
====================================

  * gpg: Fix AEAD preference list overflow.  [#5050]

  * gpg: Fix a possible segv in the key cleaning code.

  * gpgsm: Fix a minor RFC2253 parser bug.  [#5037]

  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations.  Regression in 2.2.22.  [#5039]

  * po: Fix bug in the Hungarian translation.  Updates for the Czech,
    Polish, and Ukrainian translations.

  Release-info: https://dev.gnupg.org/T5045

diffstat:

 security/gnupg2/Makefile |   4 ++--
 security/gnupg2/PLIST    |   3 ++-
 security/gnupg2/distinfo |  10 +++++-----
 3 files changed, 9 insertions(+), 8 deletions(-)

diffs (45 lines):

diff -r 4c0f89c0e046 -r 90ff5dee10ab security/gnupg2/Makefile
--- a/security/gnupg2/Makefile  Sat Sep 05 10:19:38 2020 +0000
+++ b/security/gnupg2/Makefile  Sat Sep 05 10:25:52 2020 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.116 2020/08/18 09:39:23 schmonz Exp $
+# $NetBSD: Makefile,v 1.117 2020/09/05 10:25:52 js Exp $
 
-DISTNAME=      gnupg-2.2.21
+DISTNAME=      gnupg-2.2.23
 PKGNAME=       ${DISTNAME:S/gnupg-/gnupg2-/}
 CATEGORIES=    security
 MASTER_SITES=  ftp://ftp.gnupg.org/gcrypt/gnupg/
diff -r 4c0f89c0e046 -r 90ff5dee10ab security/gnupg2/PLIST
--- a/security/gnupg2/PLIST     Sat Sep 05 10:19:38 2020 +0000
+++ b/security/gnupg2/PLIST     Sat Sep 05 10:25:52 2020 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.9 2018/11/07 11:59:08 adam Exp $
+@comment $NetBSD: PLIST,v 1.10 2020/09/05 10:25:52 js Exp $
 bin/dirmngr
 bin/dirmngr-client
 bin/g13
@@ -10,6 +10,7 @@
 bin/gpgparsemail
 bin/gpgscm
 bin/gpgsm
+bin/gpgsplit
 bin/gpgtar
 bin/gpgv2
 bin/kbxutil
diff -r 4c0f89c0e046 -r 90ff5dee10ab security/gnupg2/distinfo
--- a/security/gnupg2/distinfo  Sat Sep 05 10:19:38 2020 +0000
+++ b/security/gnupg2/distinfo  Sat Sep 05 10:25:52 2020 +0000
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.62 2020/08/18 09:39:23 schmonz Exp $
+$NetBSD: distinfo,v 1.63 2020/09/05 10:25:52 js Exp $
 
-SHA1 (gnupg-2.2.21.tar.bz2) = 4af4c6fe5f9dd7d866243f715b32775500468943
-RMD160 (gnupg-2.2.21.tar.bz2) = f76d952e0d7a18b9a3c4bad6ba077c85defbb8c2
-SHA512 (gnupg-2.2.21.tar.bz2) = b4eac75253d4a1cac341c8a1ba7bb275e849a88d5377035497777c7bcd49b5a4c91b77000311695eb7d4083856975b2b2d14518f24ab94846027280bd8c301f9
-Size (gnupg-2.2.21.tar.bz2) = 6813160 bytes
+SHA1 (gnupg-2.2.23.tar.bz2) = bd949b4af7426e4afc13667d678503063c6aa4b5
+RMD160 (gnupg-2.2.23.tar.bz2) = 48385f7d85dba9d002323032538f35a108fe266e
+SHA512 (gnupg-2.2.23.tar.bz2) = 736b39628f7e4adc650b3f9937c81f27e9ad41e77f5345dc54262c91c1cf7004243fa7f932313bcde955e0e9b3f1afc639bac18023ae878b1d26e3c5a3cabb90
+Size (gnupg-2.2.23.tar.bz2) = 7099806 bytes
 SHA1 (patch-common_sysutils.c) = 569c12e21172c1521284922244b2f4f361c945d6